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Amendments to the Claims : 

A listing of the entire set of pending claims (including amendments to the 
claims, if any) is submitted herewith per 37 CFR 1 .121 . This listing of claims will 
replace all prior versions, and listings, of claims in the application. 

Listing of Claims: 

1 . (Previously presented) A method of generating a linear transformation matrix A for 
use in a symmetric-key cipher, the method including: 

generating a binary [n,k,d] error-correcting code, represented by a generator 
matrix G € Z 2 kxn in a standard form G = (l k || B), with B e z 2 kx{r) *\ where k < n < 2k, 
and d is the minimum distance of the binary error-correcting code; 

extending matrix B with 2k-n columns such that a resulting matrix C is non- 
singular, and 

deriving matrix A from matrix C. 

2. (Previously presented) A method as claimed in claim 1, wherein extending matrix 
B with 2k-n columns includes: 

in an iterative manner: 

randomly generating 2k-n columns, each with k binary elements; 

forming a test matrix consisting of the n-k columns of B and the 2k-n 
generated columns; and 

checking whether the test matrix is non-singular, 
until a non-singular test matrix has been found; and 
using the found test matrix as matrix C. 
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3. (Previously presented) A method as claimed in claim 1 f wherein deriving matrix A 
from matrix C includes: 

determining two permutation matrices Pi,P2 e Z 2 kxk such that all codewords in 
an [2k ( k,d] error-correcting code, represented by the generator matrix ( 1 1| Pi C P2 ), 
have a predetermined multi-bit weight; and 

using Pi C P 2 as matrix A. 

4. (Original) A method as claimed in claim 3, wherein the cipher includes a round 
function with an S-box layer with S-boxes operating on m-bit sub-blocks, and the 
minimum predetermined multi-bit weight over all non-zero codewords equals a 
predetermined m-bit weight. 

5. (Previously presented) A method as claimed in claim 3, wherein determining the 
two permutation matrices Pi and P2 includes iteratlvely generating the matrices in a 
random manner. 

6. (Original) A method as claimed in claim 1, wherein the cipher includes a round 
function operating on 32-bit blocks and wherein the step of generating a [n.k.d] error- 
correcting code includes: 

generating a binary extended Bose-Chaudhuri-Hocquenghem (XBCH) [64, 
36, 12) code; and 

shortening this code to a [60, 32, 12] shortened XBCH code by deleting four 

rows. 

7. (Original) A computer program product, wherein the program product is operative 
to cause a processor to perform the method of claim 1 . 
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8. (Previously presented) A system for cryptographically converting an input data 
block into an output data block; the data blocks comprising n data bits; the system 
including: 

an input for receiving the input data block; 

a storage for storing a linear transformation matrix A % generated according to 
the method of claim 1 , 

a cryptographic processor performing a linear transformation on the input data 
block or a derivative of the input data block using the linear transformation matrix A\ 
and 

an output for outputting the processed input data block. 
9-10 (Canceled) 
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